dtoto Privacy Policy

This page describes what we collect when you use dtoto and how we keep that data protected. We believe transparency about your information builds trust, so we've laid out our practices in plain language. Our commitment is to handle your personal data responsibly, securely, and only for the purposes you've agreed to.

We at dtoto operate an online entertainment platform available where local law permits. When you open an account, deposit funds, place predictions on football matches like Liga 1 or Piala AFF, play live-dealer games, or use our slot titles, you share information with us. We take that responsibility seriously and follow strict protocols to protect it.

What We Collect on dtoto

We collect information in three ways: what you give us directly, what we gather as you use our platform, and what third parties share with us. When you register, we ask for your email, phone number, full name, date of birth, and address. We need this to verify your identity—a step we call KYC (Know Your Customer)—and to comply with local gaming regulations.

As you use dtoto, we log your activity: which games you play, your predictions on football events, your deposits and withdrawals, your IP address, and your device type. We also collect cookies and similar tracking tools so we can remember your preferences and keep your account secure. If you contact our support team via email or live chat, we store those conversations.

Payment data: When you deposit via DANA, e-wallet, mobile banking, or local payment, we do not store your full payment credentials. Our payment processors handle that securely on their own servers.

How We Use Your Data on dtoto

We use your information to run the platform. That means verifying your identity, processing your deposits and withdrawals, settling your predictions, and sending you account statements. We also use it to detect fraud, prevent money laundering, and comply with local law. If you opt in to marketing emails, we'll send you news about new games or promotions—but you can unsubscribe anytime.

Our dtoto team may also use anonymized data to improve our service: which games are popular, where our users are located, and how often they visit. This helps us decide which football tournaments to cover or which live-dealer tables to add. We never sell your personal data to third parties for their own marketing.

Third Parties and Data Processors

We work with partners to run dtoto. Our payment processors (who handle online payment, e-wallet, mobile banking, local payment, online payment, e-wallet, and bank transfers) receive your transaction details. Our live-studio operators in Manila and other regions may see your username and bet history. Our hosting provider stores our servers, which may sit outside Indonesia. We have contracts with all of them to keep your data confidential and secure.

We may also share data if the law requires it—for example, if a court orders us to disclose information, or if we suspect illegal activity. We will not do this lightly, and we will notify you unless the law forbids it.

Your Rights on dtoto

You have the right to ask us what data we hold about you, to correct it if it's wrong, and to request deletion in some cases. You can also ask us to stop using your data for marketing. To exercise these rights, contact our support team. We will respond within a reasonable timeframe.

If you believe we've mishandled your data, you can lodge a complaint with your local data protection authority. We encourage you to reach out to us first so we can try to resolve it.

Cookies, Security, and Contact

We use cookies to keep you logged in, to remember your language preference, and to track how you move through dtoto. Some cookies are essential; others help us understand user behavior. You can disable cookies in your browser, but some features may not work. We also use two-factor authentication to protect your account—we strongly recommend you enable it.

Our servers use encryption (HTTPS) to protect data in transit. We store passwords using industry-standard hashing so even we cannot read them. We conduct regular security audits and keep our systems patched against known vulnerabilities. If you notice suspicious activity on your account, change your password immediately and contact us.

Data retention: We keep your account data for as long as your account is active, plus a period after closure for legal compliance.
International transfers: Your data may be processed outside Indonesia. We ensure adequate safeguards are in place.
Children: Our services are not for anyone under the age of legal majority in their jurisdiction. We do not knowingly collect data from minors.

If you have questions about this policy or how we handle your data, email our support team or use the contact form on our site. We're here to help. Our services are available only where local law permits, and you are responsible for verifying that your use of dtoto complies with your own jurisdiction's regulations.